Canadian cybersecurity firm Magnet Forensics has filed suit against a former contractor accused of sharing trade secrets about an iPhone vulnerability with a competing company.
Magnet Forensics Inc. alleges the ex-contractor disclosed confidential information regarding a previously unknown flaw that could be exploited to hack iPhones. The contractor is said to have shared the details with a rival firm, potentially compromising the company's competitive advantage.
The lawsuit represents a significant dispute over intellectual property within the mobile security sector. iPhone vulnerabilities are highly valuable commodities, often sought by security researchers, law enforcement agencies, and competitive firms.
Magnet Forensics specializes in digital forensics and investigative software. The company's tools are used by law enforcement and security professionals to analyze mobile devices and extract data.
The case underscores ongoing tensions in the cybersecurity industry over proprietary security research and employee confidentiality agreements. Details regarding the specific vulnerability and the rival firm have not been fully disclosed. The lawsuit's outcome could establish precedent for how trade secret protections apply to contractor relationships in the digital security field.
A vulnerability called HollowByte enables unauthenticated attackers to trigger denial-of-service conditions on OpenSSL servers using a malicious payload of just 11 bytes. The flaw causes severe memory bloat on affected systems.
Federal authorities arrested 21-year-old Zyaire Wilkins, accused of publishing fake video games on Steam containing malware designed to steal cryptocurrency from thousands of users.
Federal authorities arrested a 21-year-old Florida man suspected of stealing over $220,000 in cryptocurrency through malware-infected Steam games. The scheme infected approximately 8,000 devices and compromised 80 crypto wallets between May 2024 and February 2026.
Hackers are exploiting legitimate hotel reservations from over 350 properties worldwide to launch convincing spear-phishing campaigns. The targeted attacks use genuine booking details to bypass user skepticism.